Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    24/08/2024, 13:25

General

  • Target

    beaf0014455d86b38eff8382f9b5b845_JaffaCakes118.html

  • Size

    27KB

  • MD5

    beaf0014455d86b38eff8382f9b5b845

  • SHA1

    8336453173439189c3f55b0b8cc1af5d212d0e25

  • SHA256

    7d443656bfe0a29f28bfc97eb9c70a5ce5826c904c76db142a2f049145592b2f

  • SHA512

    b2764c2cbd13e94adf3d99e67f1ce64052aa1361fed26e618a87bb97fdecd8555476eb54abccbc98a68733eaab2981fbfbcea8384ec39542bf45c50f71ba8fc4

  • SSDEEP

    384:bSN/3xNNsyAWfRiGCfB910tUcy8rWEQ2i9vuqvv6:bSN/3xNNsyAWfRTq/+Py9v5vv6

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\beaf0014455d86b38eff8382f9b5b845_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2880
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2880 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1072

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    738b62e0181522a27acb5cde662841f7

    SHA1

    d168e8bc50525196a06a2507db6968920d3936bc

    SHA256

    eef8220a5cf76132470cf201965a31691d574cb621ac0710ce7a861ea3ea8972

    SHA512

    d70a7949170fa9ea798c9e7b364720dac75686408db1508c27933851a00698846548e636d01eddd84aab91797c88ff82b6c0d73507f9e7ec2c60a54e751ce32e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16a683ee7a1643f69b9ce8c28ea8164d

    SHA1

    c0afc6a96e2f68b4a0a611f302461343ae427fd7

    SHA256

    655eda4664be1aba1b77ec66bd4090b15b1d966971edac8586f33e5941137aa4

    SHA512

    d43c4ef24138b616cc628094183916baccf671bb2ebfe6e7148aa3f56f5ae3217329a643cf2304954a9bf105d406f08df162e63c8f67fe15b33b5407025ac34e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    beb92f54b7f65a6e4b912ff6c75384c2

    SHA1

    d3310ab98be97e767678f77d3424dc34db73541b

    SHA256

    9056e98bf044ddde00d59ab4f83d525a30fdd3a50b85343cdae1f2ed3e31fefa

    SHA512

    769b55da21a1024e1542cc239b6e75cf191d60f04767c5baf251824c539c9f78a272bd6a20fe66c4a80eb71b5e7fe9b4af590862b3c9c2c1a27684b7943aa10e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d38d971431f485d5f7514c413bc6ae1

    SHA1

    1674a1e52965879400eee25e068b8bc3c94fffa2

    SHA256

    c506ebeb896fb8d19088048c194b36c77323c18c4d8486a3e1a895d63252e955

    SHA512

    04d804b863ee06c0768a6db8c5142e655f3b2e97e2730f803081c1584d376747d0d1cc8f3940f9e885901e77b62229d6579c6af6a6ba0b5b95813f0d157b5c30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a043b591bd6eba6218d7358227f73ac

    SHA1

    c73213a145ac1706102305ee99dfa5e1fddaeb01

    SHA256

    6539b8a50748ebdd9b31a136c5ee8ead6df05ab5ddabaefc15671fa48fdb2bfa

    SHA512

    ce01e69d7781f8cfb69fbcd8986d6fa506f8b67341b3a18adb7f9ff5b0682ae346e25d7a9382f9839737068bfe2941908e82f1a771f7fc4447e2107e397aac58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da08c2de6175180fe850a91939f79f2c

    SHA1

    f3bb4249002f74eccb829a96fe824c922cbb3a31

    SHA256

    8637cf42788fa915417438f8b412e98a59494b0ee9969d2135dc3048962a24a7

    SHA512

    be24f3ea0dd84bea36e73a646d8629295d79857fa5225ab64c4c9ae59a263a34de781f311b97c2afdfbab5b40a649e973257c712ef201023ef8090b158b57afc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43c68fda0c508011123a314fb4a1ed2a

    SHA1

    c0a0a10a080b87365950876701d5e56b19e50754

    SHA256

    33fcc947e76e613f7caf52e2715cc1939d8b16a94663c5f15c6a722f627d7d6b

    SHA512

    927141e6e5a74bd71e10f41aafb413250a7bcb2617810301f1c5ef87994d8f7c0255b6849bfd3020200799f18ccca347a1bd33957bbeceebb659eb90217a912c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2328917ae5c61b6960b5e853ac100fb

    SHA1

    9d84da71465886502443925ba0ab10e5e3012e39

    SHA256

    5172be06b667a5430ca7a55e2158820f29bc00d7232e545d0b0578169b2a7038

    SHA512

    d503e6a2a25ad931b5be0736ac30679c8ac2d210ebe5a844ee5898396875e9690f2b5aa71d7be9bd5961ef237d2e124193cfd7930fcf1295a8524263cbab921d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    533abc3020306226b979549bd6e804b0

    SHA1

    6bb30a25f91463f9963a471516265bcf192e1583

    SHA256

    85ebc53fcc6a158f586e47d7f5ab453dcadee60a933e2c61089f346d341e38ac

    SHA512

    8fae5ada014bbbe68215ca16ffaca28bc489896f74431ef5aae295d111f7a0ba405e00e33af65ac2afcca41feb7dccd7c60518ff3e0736ba0ff0adea4a386439

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    758285fac66c11e7ec0ef14d3395cc1c

    SHA1

    2ad2a3a424b5aec8d63343197e0d7a4e38108bcb

    SHA256

    c2e175a69f100de54fd2e9373ea810feeb7603bee1dbd37cd81425e84aaab621

    SHA512

    07887aea56677b6cd4cca473712ae77e9419eca9a512b6bb17d9385e59f32a8273349e0f5f18184e4ebba0f644f7eb8aaae88e783d35694080037cf9ed0410bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69f747071a91e94c21ab387288920996

    SHA1

    93cf59c54b4ac156dbdab4377110c4ffe675b5bc

    SHA256

    efdd4aed516b5a891de8e1c68f2a6cbde5ff9601337cc4f7be5350b06dd732d6

    SHA512

    34fa873fdf7937f2fce88496be917d3ca7e3d3cba2f6b464ee88f59b9766a4e7a2460e968e9764b46d84645a2476dcb8039797767a71e9ec8b8f8af5ef3ee9e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d483ac1751e6fb54e6ca2ed2ec53d4c8

    SHA1

    b0b8260ab16ec8804e02ed1fd940648e13f81ae9

    SHA256

    c2a6438e7f5ef8ca414097e32fe7c92c636c2efd8a4fff14da13d5f8692aed29

    SHA512

    d445a504f3110f65cabb5185844f1e7be6d74a309e18e9ef208904f588d312bff68b6e4fcc96d9f7d08312352d56a72290892b794ad4b253046dd1043964758c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2ea3be4f31959fdc408ea318fad6128

    SHA1

    09b85b4bdda0e460d0292082cb64a96352918b56

    SHA256

    aa65c373d2908cf3538272d7556588a10d9cf40d43ab084a29f383a77b53f82c

    SHA512

    cbee10126273dee9e305c066e44554b37623bc205362e61fb6e3a01497d3258f54f6a1ab38c167264a3e22b09c7d0ebd03027e8bfff6b3e0ed0bb7b5a4388374

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d86caccb4c02a9d4baf566c35a73c8e8

    SHA1

    8015fd438d25eb861c24accbf78bb02f50597440

    SHA256

    135d1d1b641a6ff92b41c4d1b0128836e9c17b2630f543dd32f35fa10f563dba

    SHA512

    edd5b1b45227f29f1171ab33669829ced996718fa4d43f02ce26f895afccdf3fdab8cba8fe7f31adbfa3bafefc2855bcfeac8457d8b425280b205fabb204cdb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5bc58b883a1f9f0c0f612b95d9cbcf69

    SHA1

    4afb3893681f664d06c1ef49887554b0b6d2625f

    SHA256

    595c39b4c105f809691bb482fd26d4f63166dcb18c882f5603213a87bc871025

    SHA512

    76aa9d291350a1ca6474167fbbfd743ddc95d1381bccc57a32dfe27159e31206bea0588ea77ce609245b203645cce14370144b6f3b113cfedbc45258b8ddbd8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84564af50bf73770ab8d3a85c0525e93

    SHA1

    49281bcba31b817e5a9441c0a12d87d053f27ce5

    SHA256

    6768f738dea47af3425979eb59e4504f6d96f8888490f1f95039baceb06544e7

    SHA512

    6190756a2db9fe5d49d972cfe72851b5de9ded4631206d259392d1b43b473c884da99948b8cc81c018cdc404ef40f5137a47175c8655ceeef238f72c441f2899

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b01c0109feec556ddab7f3d6ff2661d

    SHA1

    79e589d8fa84e7d61c7fb18c986432a3df050610

    SHA256

    71dc5c815e7906f5d1bfe01a9c8ecd0dfdc8d200f7a347583fb417e740633ce9

    SHA512

    e004b22b281f86541289b1b5cb24b316c8ff674a532d4c6e11acecbda49ccd917d0ed9ffaaa43a309a156ec25c808f61f5389b3c2b760ee025985c2ae5a3d3b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93b9639fb23976b1585c169d133b3976

    SHA1

    c71a3f2b7444b777aa000331a5d33722d067d2ad

    SHA256

    def0722371043e5f50fc0a0bec74f6fc3368350a04b496a92ce57447a99acd39

    SHA512

    06df0d7e1121ab9ee3b85433d7e6c1d75e4b5bb2c80e26ea0bb568c7be205f9d1e81ec54780d99fb820600dcb2a3f86ee521fea2fbf8df1c748be706be42790d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e856e964ddc2412a5dbdcd823b14f20f

    SHA1

    fa0d74d5847bb723b20f7a5eac7853c1b1f0a010

    SHA256

    0a3129d37bcd5e51f711efdb892709abd5ae462cf28a134fe79fcd6872068042

    SHA512

    c00aee972f5799e074b6ffd525e1f05825fc3425792d103736c70e2fa4912d0052185c6234152ce0c5917f63ad3c6df6201f0084903bd579a6d66aa1ebc350f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5189f66748356139bfc616d79fa0a4e6

    SHA1

    e86e04d30345d5b45d6ff58d7f021013174b5d9c

    SHA256

    d4d186fa798de0f72d26021bfe5f628b8e8cb9d0f8fc24b915f9205026a0c170

    SHA512

    f5bffc83ea1319f5791bf4d5234820f72d1718c8c023187d82d1aa33576f76ef8fc14f46e5be942b0f332a5340afb254f54cca040e57530222f4a2d5ae26dd2c

  • C:\Users\Admin\AppData\Local\Temp\Cab4858.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar48C9.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b